Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/16ea9ee0-379f-31f0-a2ff-671c691f6f80.roa
File:                     16ea9ee0-379f-31f0-a2ff-671c691f6f80.roa (raw, json)
Hash identifier:          wQ+CDmlB6Uj+aAXrRtQn+tJz7iRKR/wZv/UTDvSHMqY=
Subject key identifier:   C4:67:51:B7:CD:65:FB:1F:68:36:20:44:A0:18:0E:63:BB:20:E6:A0
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584DBD05A07F055C5CFE7343F300
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/16ea9ee0-379f-31f0-a2ff-671c691f6f80.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     393249
IP address blocks:        206.12.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a0:7f:05:5c:5c:fe:73:43:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=5d8ad6b6-40a3-4c3f-b258-bff84f276109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2b:f6:33:8d:6b:15:c4:7d:91:55:61:28:31:
                    c0:ff:68:b8:0e:3b:6f:be:88:2e:5b:cf:e0:21:80:
                    02:28:1b:8c:38:a0:00:f3:cd:cc:04:6f:8f:74:a1:
                    bc:57:5d:54:7d:81:32:e1:57:7e:35:68:e3:cb:2d:
                    65:16:3d:17:8b:f8:42:63:9c:8b:2b:fc:23:e3:f8:
                    c9:ff:2f:90:70:3b:b0:de:13:05:9d:e4:e9:04:08:
                    49:55:d7:d7:aa:48:d8:29:7b:dd:5b:2c:09:69:0f:
                    d3:01:2e:83:17:87:54:d3:67:f2:3d:de:1b:d9:35:
                    2e:00:e3:50:fd:2c:b5:1f:48:22:a3:01:c7:f2:c0:
                    90:42:f0:81:11:98:5b:9f:0e:45:55:d6:b1:b0:ab:
                    db:47:70:03:0d:3e:d4:2f:c0:da:22:01:1a:42:79:
                    5e:b3:cc:5e:68:7b:49:34:60:0b:af:15:c0:cb:71:
                    39:35:e5:8e:37:85:36:be:02:9a:5c:9d:15:5d:d4:
                    55:09:6a:f0:53:3d:09:9c:dc:8c:11:89:3d:93:89:
                    18:8e:ce:2c:ea:8a:10:fe:fb:99:4f:54:09:a0:16:
                    12:02:79:2c:00:0b:e5:76:70:7b:b3:ff:42:4a:44:
                    8e:b0:4d:d0:69:75:3d:b0:cd:e2:39:cd:72:3d:8f:
                    7a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:67:51:B7:CD:65:FB:1F:68:36:20:44:A0:18:0E:63:BB:20:E6:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/16ea9ee0-379f-31f0-a2ff-671c691f6f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:fe:45:af:19:82:84:55:19:84:a9:39:46:57:fe:fe:c6:7e:
         61:97:b0:bb:be:50:fa:5d:c7:c1:34:77:6f:4a:59:73:14:d6:
         9f:6b:69:15:1b:25:e3:60:6e:bd:70:b3:11:05:76:d8:22:37:
         ca:0d:0f:2d:9c:01:c6:da:13:e9:b2:97:dc:a9:fd:07:b9:d0:
         8d:6d:7a:7a:29:4f:fa:04:9e:74:fd:d3:c6:55:51:9e:f2:c7:
         ce:3b:3b:56:21:54:04:fe:ad:d8:d2:7b:67:06:3f:bf:90:17:
         c0:7a:46:0d:89:59:47:69:9c:35:2e:03:1e:13:86:a5:65:de:
         e8:54:2c:6e:d6:96:c5:3c:db:82:9f:52:98:a9:88:ae:b2:3a:
         d0:14:fd:c8:72:ff:63:24:44:f5:1e:4b:ce:0d:d7:51:2b:98:
         c1:b2:fe:30:99:90:90:59:71:74:ba:37:55:83:77:fd:6d:10:
         b7:c3:f5:65:1b:57:77:6b:f8:d2:1f:0c:97:5a:63:82:20:36:
         40:29:e0:05:34:88:ce:81:ae:2c:f2:2c:72:7b:8a:39:33:be:
         43:86:c7:b8:19:3b:b0:4c:72:18:c1:c7:a1:ce:a6:3a:a1:d9:
         fb:2b:50:e5:a2:71:08:8e:5d:f5:49:56:24:7b:30:3e:f1:41:
         4c:f6:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:28:58 2026 by rpki-client